[Hiring] Cloud Security Architect @Huron

Role Description

As a senior member of the internal security organization, you will play a key role in designing and validating secure architectures across cloud and hybrid environments. You will perform security architecture assessments, identify and prioritize security gaps, and help shape the organization’s overall security posture. This role requires a self-directed professional who can analyze and document complex environments with minimal supervision, translate findings into actionable improvements, and partner effectively with business stakeholders to implement controls without disrupting operations.

While the primary focus is cloud security, this role functions as a subject matter expert across multiple security domains and contributes directly to strategic security initiatives and roadmaps. This is an internally facing position and not customer-facing.

Security Architecture & Design

• Lead security architecture assessments for new and existing applications, systems, and integrations across cloud and hybrid environments.
• Partner with product engineering, DevOps, and compliance teams to develop secure architecture patterns that address data protection, access control, network segmentation, and resilience.
• Participate in threat modeling exercises to proactively identify security risks and guide secure design decisions.
• Assess and validate security requirements for new and emerging technologies, including Artificial Intelligence (AI) services and platforms.

Cloud Security & Posture Management

• Serve as the primary subject matter expert for cloud security, with a strong emphasis on Microsoft Azure.
• Evaluate and improve configurations across identity, networking, compute, storage, and platform services.
• Analyze and document the current cloud environment, identify security gaps, and develop prioritized remediation roadmaps.
• Design and implement cloud security policies, and guardrails using cloud-native tooling (e.g., Azure Policy, AWS Service Control Policies).

Automation & Infrastructure as Code

• Author scripts and automation (Python, PowerShell, or similar programming languages) to audit, monitor, and remediate undesirable configurations within the environment.
• Design and implement Infrastructure as Code (IaC) to enforce security baselines, automate deployments, and ensure repeatable, auditable configurations.

Cross-Domain Security Expertise

• Function as a subject matter expert across multiple security domains including cloud security posture management, identity and access management (IAM), and server/endpoint protection.
• Provide input into strategic security initiatives and roadmaps, helping shape the direction of the security program.
• Stay current with emerging threats and industry trends.
• Assist with monitoring and evaluating the effectiveness of information security safeguards and remediating discovered gaps.

Incident Response & Collaboration

• Occasionally serve as a subject matter expert during incident response activities, providing expertise in root cause analysis and remediation.
• Coordinate with business stakeholders to ensure that the introduction or enhancement of security controls does not adversely impact operations.

Qualifications

• Bachelor’s degree or equivalent work experience in Computer Science, Cybersecurity, Information Systems, or a related field.
• 8+ years of hands-on information security experience, with at least 3 years in a dedicated security architecture role.
• Strong experience with Microsoft Azure security services and architecture.
• Demonstrable ability to evaluate and secure configurations across identity, networking, compute, storage, and platform services.
• Proficiency in at least one scripting or programming language (Python or PowerShell preferred; other languages acceptable).
• Proven ability to design and implement Infrastructure as Code (IaC) for security automation and baseline enforcement.
• Strong understanding of regulatory and compliance frameworks such as ISO 27001, NIST, HITRUST, and/or SOC 2.
• Proficiency with authentication and authorization protocols such as SAML, OAuth/OIDC, and LDAP.
• Demonstrated ability to work independently, analyze complex environments, and produce clear, actionable documentation with minimal supervision.
• Excellent communication and interpersonal skills, with the ability to collaborate across technical and non-technical teams and to influence without authority.

Preferred Qualifications

• Experience with AWS and/or Oracle Cloud Infrastructure in addition to Azure.
• Experience with Microsoft 365, specifically Entra ID, Conditional Access, and Privileged Identity Management (PIM).
• Networking and firewalling experience, including implementation of next-generation firewalls (NGFW) in cloud environments.
• Experience securing microservices, serverless, and container-based architectures.
• Experience with securing AI/ML services and platforms, with a focus on data privacy, access control, and secure model deployment.
• Relevant certifications such as Azure Security Engineer (AZ-500), Azure Solutions Architect (AZ-305 or AZ-104), AWS Security Specialty, AWS Solutions Architect, or similar.

Benefits

• Medical, dental, and vision coverage.
• Other wellness programs.

Salary Information

The estimated base salary for this job is $140,000 - $190,000 USD. The range represents a good faith estimate of the range that Huron reasonably expects to pay for this job at the time of the job posting. The actual salary paid to an individual will vary based on multiple factors, including but not limited to specific skills or certifications, years of experience, market changes, and required travel. This job is also eligible to participate in Huron’s annual incentive compensation program, which reflects Huron’s pay for performance philosophy. Inclusive of annual incentive compensation opportunity, the total estimated compensation range for this job is $161,000 - $237,500 USD.